4009 matches found
CVE-2011-2690
Buffer overflow in libpng 1.0.x before 1.0.55, 1.2.x before 1.2.45, 1.4.x before 1.4.8, and 1.5.x before 1.5.4, when used by an application that calls the pngrgbtogray function but not the pngsetexpand function, allows remote attackers to overwrite memory with an arbitrary amount of data, and...
CVE-2011-2501
The pngformatbuffer function in pngerror.c in libpng 1.0.x before 1.0.55, 1.2.x before 1.2.45, 1.4.x before 1.4.8, and 1.5.x before 1.5.4 allows remote attackers to cause a denial of service application crash via a crafted PNG image that triggers an out-of-bounds read during the copying of...
PT-2011-1111
Name of the Vulnerable Software and Affected Versions libpng versions 1.0.x through 1.0.54 libpng versions 1.2.x through 1.2.44 libpng versions 1.4.x through 1.4.7 libpng versions 1.5.x through 1.5.3 libpng versions prior to 1.5.10 Description The issue allows remote attackers to cause a denial o...
PT-2011-1112
Name of the Vulnerable Software and Affected Versions libpng versions 1.0.x through 1.0.54 libpng versions 1.2.x through 1.2.44 libpng versions 1.4.x through 1.4.7 libpng versions 1.5.x through 1.5.3 libpng versions prior to 1.5.10 Description The issue is related to multiple vulnerabilities in t...
CVE-2011-2692
The pnghandlesCAL function in pngrutil.c in libpng 1.0.x before 1.0.55, 1.2.x before 1.2.45, 1.4.x before 1.4.8, and 1.5.x before 1.5.4 does not properly handle invalid sCAL chunks, which allows remote attackers to cause a denial of service memory corruption and application crash or possibly have...
PT-2011-1187
Name of the Vulnerable Software and Affected Versions libpng versions 1.0.x through 1.0.54 libpng versions 1.2.x through 1.2.44 libpng versions 1.4.x through 1.4.7 libpng versions 1.5.x through 1.5.3 Description The issue allows remote attackers to cause a denial of service, potentially leading t...
CVE-2011-2691: NULL Pointer Dereference
The pngerr function in pngerror.c in libpng 1.0.x before 1.0.55, 1.2.x before 1.2.45, 1.4.x before 1.4.8, and 1.5.x before 1.5.4 makes a function call using a NULL pointer argument instead of an empty-string argument, which allows remote attackers to cause a denial of service application crash vi...
PT-2011-1110
Name of the Vulnerable Software and Affected Versions libpng versions prior to 1.0.55 libpng versions prior to 1.2.45 libpng versions prior to 1.4.8 libpng versions prior to 1.5.4 libpng versions prior to 1.5.10 Description The issue is related to the handling of invalid sCAL chunks in PNG images...
CVE-2011-2690
Buffer overflow in libpng 1.0.x before 1.0.55, 1.2.x before 1.2.45, 1.4.x before 1.4.8, and 1.5.x before 1.5.4, when used by an application that calls the pngrgbtogray function but not the pngsetexpand function, allows remote attackers to overwrite memory with an arbitrary amount of data, and...
CVE-2011-2690: Buffer Copy without Checking Size of Input
Buffer overflow in libpng 1.0.x before 1.0.55, 1.2.x before 1.2.45, 1.4.x before 1.4.8, and 1.5.x before 1.5.4, when used by an application that calls the pngrgbtogray function but not the pngsetexpand function, allows remote attackers to overwrite memory with an arbitrary amount of data, and...
CVE-2011-2692: Improper Restriction of Operations within the Bounds of a Memory Buffer
The pnghandlesCAL function in pngrutil.c in libpng 1.0.x before 1.0.55, 1.2.x before 1.2.45, 1.4.x before 1.4.8, and 1.5.x before 1.5.4 does not properly handle invalid sCAL chunks, which allows remote attackers to cause a denial of service memory corruption and application crash or possibly have...
CVE-2011-2501: Out-of-bounds Read
The pngformatbuffer function in pngerror.c in libpng 1.0.x before 1.0.55, 1.2.x before 1.2.45, 1.4.x before 1.4.8, and 1.5.x before 1.5.4 allows remote attackers to cause a denial of service application crash via a crafted PNG image that triggers an out-of-bounds read during the copying of...
[SECURITY] Fedora 15 Update: mingw32-libpng-1.4.3-3.fc15
MinGW Windows Libpng library...
[SECURITY] Fedora 14 Update: mingw32-libpng-1.4.3-2.fc14
MinGW Windows Libpng library...
Security fix for the ALT Linux 5 package libpng version 1.2.46-alt1
July 13, 2011 Dmitry V. Levin 1.2.46-alt1 - Updated to 1.2.46 fixes: CVE-2011-2690, CVE-2011-2691, CVE-2011-2692...
Security fix for the ALT Linux 6 package libpng version 1.2.46-alt1
July 13, 2011 Dmitry V. Levin 1.2.46-alt1 - Updated to 1.2.46 fixes: CVE-2011-2690, CVE-2011-2691, CVE-2011-2692...
libpng invalid sCAL chunk processing vulnerability
Overview libpng reads uninitialized memory when processing invalid sCAL chunks. Description When libpng encounters a sCAL chunk that is empty it will read uninitialized memory. libpng also does not properly handle a sCAL chunk that lacks the terminating zero between the two strings...
About the security content of Safari 5.0.4
About the security content of Safari 5.0.4 Last Modified: March 09, 2011 Article: HT4566 Email this article Print this page Summary This document describes the security content of Safari 5.0.4. For the protection of our customers, Apple does not disclose, discuss, or confirm security issues until...
Gentoo Security Advisory GLSA 201010-01 (libpng)
The remote host is missing updates announced in advisory GLSA 201010-01. SPDX-FileCopyrightText: 2011 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...
Gentoo Security Advisory GLSA 201010-01 (libpng)
The remote host is missing updates announced in advisory GLSA 201010-01. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2011 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...